Google Workspace configuration for calendar sync on EasyHour

In order to integrate your company domain powered by Google with EasyHour an administrator must change a few settings in Google Workspace.

Once Google login is set up, employees will be able to log in on EasyHour with no need to create any account in advance. User authentication will happen on Google servers using their mail credentials.

 

Preliminary EasyHour configuration

First of all, you need to set the login type. In Company > Employees > Login Configuration select "Google".

In the "Domain" field enter the company domain, e.g. if your corporate e-mail is name.surname@company.com then enter company.com as the domain. The domain will be used to identify your employees, so in this case only users with an @company.com account will be able to log into EasyHour.

Click the "Save" button.

 

Google Workspace configuration

Login to Google Cloud as an administrator and follow these steps:

  1. Use the selector in the top bar to choose the EasyHour project or create a New Project. 
    If a project is created, give it a recognizable name, such as
    easyhour-calendar-sync, and choose the correct organization and folder.
  2. Verify in the selector at the top that the newly selected project is the active project.
    The Cloud project can belong to the same Workspace organization, but this alone does not grant
    Calendar or Admin SDK access: access to Workspace data is authorized separately.
  3. Enable Calendar API and Admin SDK API
    • Open APIs & Services.
    • Search for Google Calendar API, open it, and press Enable.
    • Return to the Library, search for Admin SDK API, open it, and press Enable.
  4. Check that both are present in APIs & Services → Enabled APIs & Services.
  5. Create the service account
    • Open IAM & Administration → Service Accounts.
    • Press Create Service Account.
    • Fill in, for example:
      • Service Account Name: easyhour-calendar-sync
      • Service Account ID: easyhour-calendar-sync
    • Press Create & Continue.
      You do not need to assign Google Cloud IAM roles to access Workspace data. Press
      Continue and then Finish, unless your organization has specific policies.
  6. Open the newly created service account.
  7. In the advanced settings, locate the Domain-Level Delegation section
    and note the Client ID. The Admin Console requires this number, not the service account email address.
    The project's IAM roles control Google Cloud resources and do not automatically grant access
    to Google Workspace calendars, users, or rooms.
  8. Create the JSON key
    • On the service account page, open the Keys tab.
    • Select Add key → Create new key.
    • Select JSON and press Create.
    • The browser downloads the only copy of the new private key.
      Keep and store the JSON key as it won't be possible to download it again!

 

Finalize EasyHour configuration

Finally, go back to EasyHour and upload the JSON file values you just downloaded, then check "Sync meeting room bookings".

Save the new configuration and you're done.